From 26a0ace4d8661c0ce331644726fd77d3604fb6c5 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 27 Jul 2024 05:05:34 +0000 Subject: [PATCH] fix: jsx/package.json & jsx/yarn.lock to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BOOTSTRAP-7444580 --- jsx/package.json | 2 +- jsx/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/jsx/package.json b/jsx/package.json index 8ac6f020ce..b69dbb2205 100644 --- a/jsx/package.json +++ b/jsx/package.json @@ -28,7 +28,7 @@ } }, "dependencies": { - "bootstrap": "^4.5.3", + "bootstrap": "^5.0.0", "history": "^5.0.0", "lodash.debounce": "^4.0.8", "prop-types": "^15.7.2", diff --git a/jsx/yarn.lock b/jsx/yarn.lock index 34f78b6964..30a6c01e47 100644 --- a/jsx/yarn.lock +++ b/jsx/yarn.lock @@ -2296,10 +2296,10 @@ boolbase@^1.0.0: resolved "https://registry.yarnpkg.com/boolbase/-/boolbase-1.0.0.tgz#68dff5fbe60c51eb37725ea9e3ed310dcc1e776e" integrity sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww== -bootstrap@^4.5.3: - version "4.6.2" - resolved "https://registry.yarnpkg.com/bootstrap/-/bootstrap-4.6.2.tgz#8e0cd61611728a5bf65a3a2b8d6ff6c77d5d7479" - integrity sha512-51Bbp/Uxr9aTuy6ca/8FbFloBUJZLHwnhTcnjIeRn2suQWsWzcuJhGjKDB5eppVte/8oCdOL3VuwxvZDUggwGQ== +bootstrap@^5.0.0: + version "5.3.3" + resolved "https://registry.yarnpkg.com/bootstrap/-/bootstrap-5.3.3.tgz#de35e1a765c897ac940021900fcbb831602bac38" + integrity sha512-8HLCdWgyoMguSO9o+aH+iuZ+aht+mzW0u3HIMzVu7Srrpv7EBBxTnrFlSCskwdY1+EOFQSm7uMJhNQHkdPcmjg== brace-expansion@^1.1.7: version "1.1.11"